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What is claimed is: 
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A^method compri 



verifying a us 



e of a digital credential; and ' 



The method of claim 



transaction inf orma 



The method of clairr 
information include 
signed using a dig 
credential, a value 
an internet protoc 
transaction and a 



The method of clai:n 



activity report f 
activity report li 



The method of claijm 
name to a digital 
credential, where ifn 
the digital signatu 



storing a result of the verification in an activity 



1 further including storing 
tion in the activity log. 

2, wherein the transaction 
s at least one of a message that was 
tal signature key of the digital - 

of a transaction, an online service, 
1 (IP) address, a date of the 
ime of the transaction. 



1 further including generating an 
rpm the activity log, wherein the 
ts the stored verification results. 



4 further including associating a 
ignature key of the digital 

the activity report lists the name of 
re key. 
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The method of claim 4| wherein generating the activity 
report includes generating the activity report upon 
request by an owner of the digital credential. 



The method of claim 



report includes gen 
the digital credenti 

8. The method of claim 



, wherein generating the activity 
ejating the activity report each time 
1 is verified. 



, wherein generating the activity 



report includes generating a report periodically. 

9. The method of claim/ 1 further including analyzing the 
activity log to denect misuse of the digital credential. 

10. The method of claijm 6, wherein generating the activity 
report includes listing activity for a plurality of 
digital signature/ keys associated with the owner. 

11. The method of claim 1 further comprising: 

authorizing! one or more delegates to use a delegated 
digital credential to act on behalf of the owner of the 
digital credential for specified functions, wherein 
verifying the use of the digital credential includes 
determining whether the delegated digital credential was 
authorized for (the specific use. 
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12. The method of claim 4, v|herein generating an activity 

report includes activity reports of the delegates of the 



15. 



user . 



:omputer-readable medium having 
auctions stored thereon for 



13. An article comprising a 
computer-executable inst 
causing a computer to: 

verifying a use of 
storing a result of 

log. 

14. The article of claim 13, wherein the computer-executable 
instructions cause the cbmputer to store transaction 



a digital credential; and 
the verification in an activity 



information in activity 

The article of claim 14, 
information includes at 
signed using a digital s 
credential, a transactio 
processing the transact! 



log . 

wherein the transaction 
Least one of a message that was 
ignature key of the digital 
n value, an online service 



on, an internet protocol (IP) 
address of a computing device originating the 
transaction, the date of the transaction and the time of 
the transaction, 

16. The article of claim 13[ wherein the computer-executable 
instructions cause the Computer to generate an activity 
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report from the activity log, wherein the activity report 
lists the stored verification results. 



The article of claim 16 and further including associating 
a name to a digital signature key of the digital 
credential, wherein Vthe activity report lists the name of 



the digital signature 



The article of claim 



instructions cause tne 



De 



report upon receiving 
digital credential , 
credential is verifi 

The article of claim 
instructions cause t 
log to detect misuse 



key. 

16, wherein the computer-executable 
computer to generate the activity 
a request by an owner of the 
riodically, or when the digital 
d. 

13, wherein the computer-executable 
ie computer to analyze the activity 
of the digital credential. 



The article of claim 
instructions cause t 
report activity for 
associated with the 
digital signature key 

The article of claim 
instructions cause th«i 
delegates to use a de 



17, wherein the computer-executable 
e computer to list in the activity 

plurality of digital signature keys 
wn-er according to the name of the 



0, wherein the computer-executable 
computer to authorize one or more 
egated digital credential to act on 
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behalf of the owner \>f the digital credential for 
specified functions and determine whether the delegated 
digital credential was authorized for the specific use. 

The article of clainj 21, wherein the computer-executable 
instructions cause tjhe computer to generate activity 
reports of the delegates. 



ven 



A system comprising 
a server to 
an activity loc 

results from the ve 



The system of claim 
configured to store 
authentication result 



ri 



ify digital credentials; and 
coupled to the server to store 
f ication . 



23, wherein the activity log is 
transaction information for each 



The system of claim 
information includes 
message, a date of t 
transaction, an onl 
authentication, an i 
value of the transact 



ine 



int 



The system of claim 
database to store in 
credential and owner 



4, wherein the transaction 
at least one of a digitally signed 
he transaction, a value of the 
service requesting the 
ernet protocol (IP) address, a 
ion, and a time of the transaction. 



3, and further comprising an owner 
ormation of an owner of the digital 
approved delegates. 
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An article comprising a computer-readable medium having 
data structures stored thereon comprising: 

field to store a result from an 



a first data 
verification of a 

a plurality o 
information relati 



digital credential; and 

£ data fields to store transaction 

ig to each verification result. 



The article of claim 27, wherein the plurality of data 



fields store at 1 



€ ast one of a digitally signed message, 



a date of the transaction, a time of the transaction, a 
value of the transaction, an online service, an internet 
protocol (IP) addkess of a computing device originating 
the transaction, and goods or services involved in the 
transaction , 



The article of cl 



further include a 



and delegate info 



A method comprisi 
receiving i 

credential; 

storing the 
generating 



aim 27, wherein the data structures 
plurality of data fields to store owner 
rmation . 

ig: 



nformation describing a use of a digital 

jse information in an activity log; and 
an activity report based on activity log. 
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31. The method of claim 30, wherein the use inforrja^ti 
includes transaction information. 



on 



32. The method of claim 30, wherein the us/ information 
includes verification information fjsr the digital 
credential . 

33. The method of claim 31, wherei^i the transaction 
information includes at leasx one of a message that was 
signed, a transaction vali/e, an online service, an 
internet protocol (IP) ^address, a value of the 
transaction, a date 9T the transaction and a the time of 
the transaction. 

34. The method of cl^im 30, wherein the digital credential 
includes a dig/tal signature key, and further wherein 
generating tbre activity report includes associating a 
name to the/ digital signature key and listing the name of 
the digital signature key. 

35. The method of claim 30, wherein generating the activity 
report/ includes generating the activity report upon 
request by an owner of the digital credential. 

36. The method of claim 30, wherein generating the activity 

report includes generating the activity report each time 

/the digital credential is verified. 
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37. The method of claim 30, 



report includes generat 



38. The method of claim 30 



activity log to detect 



wherein generating the activity 
ing a report periodically. 

further including analyzing the 
misuse of the digital credential. 



39. The method of claim 35; wherein generating the activity 
report includes listing activity for a plurality of 
digital signature keyd associated with the owner. 

40. The method of claim 30 further comprising: 

authorizing one pr more delegates to use a delegated 
digital credential to) act on behalf of the owner of the 
digital credential far specified functions, wherein 
verifying the use of the digital credential includes 
determining whether the delegated digital credential was 
authorized for the specific use. 

41. The method of claim BO, wherein generating an activity 
report includes activity reports of the delegates of the 
user . 

42. A method comprising: 

storing use information for a digital credential of 

a user; 

processing the I use information to detect misuse; and 

generating an plert when misuse is detected, 
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43, 



47. 



48 



The method of claim 4^, wherein generating an alert 
includes generating cfn activity report based on the use 
information . 

44. The method of claim 142, wherein generating an alert 
includes alerting a credential service provider. 

45. The method of claim/42, wherein the use information 
includes transaction information. 

46. The method of clainJ 42, wherein the use information 
includes verification information for the digital 
credential . 



The method of clain 
information include; 
signed, a transact 
internet protocol 
transaction, a dat 
the transaction, 



45, wherein the transaction 
s at least one of a message that was 
4on value, an online service, an 

IP) address, a value of the 
4 of the transaction and a the time of 



rans 



A method comprising 

receiving t 
users, wherein the 
credentials for th 



action reguests from a plurality of 
transaction requests include digital 



b users; 



processing the transaction requests; and 



-23 - 



Attorney Dq^fct : 10559/225001/P87 90 



communicating 
service, wherein th 
digital credentials 
The method of claim 
transaction request- 
credentials to the 
The method of claiih 



:ransaction information to a central 

transaction information includes the 
of the users. 

48, wherein processing the 
s includes communicating the digital 
central service for verification. 
48, wherein processing the requested 



transaction includes : 

verifying the digital credential; and 
communicating a result of the verification to the 

credential service . 

The method of claim 48 further including receiving a 
activity report from the central service, wherein the 
activity report lists the transaction information for 
each digital credential. 

The method of claim 48, wherein the transaction 



information incl 
signed, a transa 



ides at least one of a message that was 
stion value, an online service, an 
internet protocol (IP) address, a value of the 
transaction, a date of the transaction and a the time of 



the transaction. 
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a digital credentia 



verification servi 



53. A method comprising: 

receiving a request from a medical professional to 
access medical information, wherein the request includes 

for the medical professional; 
communicating transaction information describing the 
access request and "he digital credential to a credential 

ce; 

receiving a verification result from the credential 
verification serviqe; 

medical professional access to the 

based on the verification result; and 
ctivity report from the credential 
<:e, wherein the activity report list 
ormation, the digital credential and 
ult, 



providing the 
medical information 

receiving an 
verification servi 
the transaction in 
the transaction re 



54. The method of claim 



information includ 



53, wherein the transaction 
s at least an access type, a date of 



the transaction and a time of the transaction, 



credential was p 
and a credential s 



rovic 



55. The method of clai|n 53, further wherein the digital 

_ded by a credential issuing service 
jjervice provider. 
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The method of claim ^\ and further including: 

receiving a yf^equest to access the activity report 

from an ownejr 3f the digital credential; and 

providing the owner access to the activity report. 
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